This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: n5CrE4T6yAJ4rh42yZZFLA5sMODQmRq+4NOTMpYgko8= Subject key identifier: 68:DB:32:4B:6D:33:C3:4E:A1:42:5B:28:6E:A9:29:07:7A:27:4D:C5 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 047D Signing time: Sat 20 Dec 2025 23:23:14 +0000 Manifest this update: Sat 20 Dec 2025 23:23:14 +0000 Manifest next update: Sat 27 Dec 2025 23:23:14 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: QT7lmRqSl2qv32BZdNBKs7YWdw26zXqEZLOK7+DqPwI=) 2: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: aj4Q4SeRE+NI4REEKNFbR+3ayDuDtlipzDAl7u7My1E=) 3: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: RgkBiig85GBTWo6hrTV95O/BhHQIjrp9qKOVuIGC96Q=) 4: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: uCKPAwy0X3Z4CL+hlBr0CZ+w6vMoqyCthCGEPEwyTxY=) 5: A8827568116911EEBB241C32C4F9AE02.roa (hash: ePscgiftvgu3AgZJRcwiRUYhc5l5akEknNm+3bxCM0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Dec 20 23:23:14 2025 GMT Not After : Dec 27 23:23:14 2025 GMT Subject: CN=69472fe2-24fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:46:af:d2:03:44:8e:15:8a:d0:e3:95:3a:3c: 8d:cd:ed:a6:8b:9f:94:6a:b0:ad:60:ca:67:be:2f: 70:f4:64:07:56:85:a1:6d:9e:6f:30:f9:03:06:ad: 17:8a:c7:0c:a8:b6:c4:e7:00:64:9f:7f:36:7a:3f: 6a:54:19:d2:d5:10:05:14:5a:d6:d1:cd:73:c3:a8: 50:e2:29:ab:db:b4:c6:0a:7d:44:7d:3f:56:c5:0f: f0:99:b5:05:43:37:f5:2d:89:0a:e4:bf:53:75:c6: 93:73:80:9b:1d:75:03:a9:75:55:18:cc:bc:ae:6d: b2:32:24:18:33:c6:3b:f1:7d:52:a3:f5:8d:a7:cf: 5c:82:e3:6a:7b:21:ff:6b:24:e0:e7:7d:05:46:b1: 2f:59:86:11:2f:2e:32:a3:a8:95:a8:4b:96:7c:ae: 3b:33:83:8a:db:7b:b3:35:d8:3e:d4:40:26:0e:21: b0:c4:8a:18:b6:b0:1a:af:05:a8:1b:65:ed:41:9e: 5b:a3:b5:8e:29:24:89:3e:dc:3f:09:ec:95:39:ec: 67:0a:cb:be:f5:23:fc:0f:e3:4e:44:9a:81:0a:89: f4:43:47:47:19:5b:0c:db:6e:10:d6:6d:6d:64:74: c3:21:b4:4f:30:25:59:a6:2d:38:8f:ee:60:32:35: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DB:32:4B:6D:33:C3:4E:A1:42:5B:28:6E:A9:29:07:7A:27:4D:C5 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:58:65:46:3e:a9:26:3b:9b:db:bf:ba:2c:3d:49:d4:e0:f7: 96:d9:27:2a:0a:21:bb:52:43:ad:10:11:b1:71:a0:f1:93:7e: 73:0d:fc:a3:e5:af:e5:4e:81:4f:6f:58:71:34:fe:57:9e:8d: 18:cc:c9:35:4a:34:a4:9e:b7:1a:98:9a:3a:9f:71:59:db:4f: 62:79:5a:bb:62:db:33:1e:40:9e:5d:f6:29:b9:9a:d1:b9:f6: 9b:a1:0a:d2:6f:b2:7f:07:30:4f:a2:2e:ef:d1:38:02:33:c0: ee:2e:92:ab:4c:60:f6:c9:92:d1:b1:93:f7:22:19:ce:98:60: e9:4b:5e:c6:24:57:fb:9e:5e:3b:34:b7:7d:1b:17:5c:5f:5b: 87:72:b8:97:34:6b:a9:9c:d3:36:58:78:e7:50:60:60:14:29: a2:91:47:3e:0b:5a:09:e1:1d:77:8d:30:3a:35:64:e5:88:11: 1a:d8:9e:1a:f4:04:46:43:94:d5:7b:5e:bd:2e:5e:bf:dd:8b: d2:ef:39:ec:bc:e8:af:d0:e3:b6:c1:ce:5b:75:0f:86:54:b9: 7a:45:fa:47:db:cb:7e:c9:ac:e7:9f:44:61:5c:38:48:ff:2c: 74:ae:3d:0e:23:2d:f4:39:e6:eb:63:1a:ec:35:cd:de:9d:68: ee:a2:af:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjUxMjIwMjMyMzE0WhcNMjUxMjI3MjMyMzE0WjAYMRYwFAYD VQQDDA02OTQ3MmZlMi0yNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkav0gNEjhWK0OOVOjyNze2mi5+UarCtYMpnvi9w9GQHVoWhbZ5vMPkDBq0X iscMqLbE5wBkn382ej9qVBnS1RAFFFrW0c1zw6hQ4imr27TGCn1EfT9WxQ/wmbUF Qzf1LYkK5L9TdcaTc4CbHXUDqXVVGMy8rm2yMiQYM8Y78X1So/WNp89cguNqeyH/ ayTg530FRrEvWYYRLy4yo6iVqEuWfK47M4OK23uzNdg+1EAmDiGwxIoYtrAarwWo G2XtQZ5bo7WOKSSJPtw/CeyVOexnCsu+9SP8D+NORJqBCon0Q0dHGVsM224Q1m1t ZHTDIbRPMCVZpi04j+5gMjXPVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjbMktt M8NOoUJbKG6pKQd6J03FMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiWGVGPqkmO5vbv7osPUnU4PeW2ScqCiG7UkOtEBGxcaDxk35zDfyj 5a/lToFPb1hxNP5Xno0YzMk1SjSknrcamJo6n3FZ209ieVq7YtszHkCeXfYpuZrR ufaboQrSb7J/BzBPoi7v0TgCM8DuLpKrTGD2yZLRsZP3IhnOmGDpS17GJFf7nl47 NLd9GxdcX1uHcriXNGupnNM2WHjnUGBgFCmikUc+C1oJ4R13jTA6NWTliBEa2J4a 9ARGQ5TVe169Ll6/3YvS7znsvOiv0OO2wc5bdQ+GVLl6RfpH28t+yaznn0RhXDhI /yx0rj0OIy30OebrYxrsNc3enWjuoq9z -----END CERTIFICATE-----Generated at Mon Dec 22 09:46:19 2025 by rpki-client